✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Advisory – CVE-2019-0271 SAP Netweaver ABAP Server XML External Entity Injection Vulnerability

March 13, 2019
Rewterz

Rewterz Threat Advisory – CVE-2018-4832 Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software

March 13, 2019

Rewterz Threat Advisory – CVE-2019-0275 SAP NetWeaver Java AS Cross Site Scripting Vulnerability

Severity

Medium

Analysis Summary

SAP NetWeaver Java AS is prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 
Remote attackers can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Impact

  • Execution of arbitrary script code.
  • Loss of credentials.
  • Exposure of sensitive information.

Affected Products

SAP NetWeaver JAVA AS 7.50
SAP NetWeaver JAVA AS 7.40
SAP NetWeaver JAVA AS 7.31
SAP NetWeaver JAVA AS 7.30
SAP NetWeaver JAVA AS 7.20
SAP NetWeaver JAVA AS 7.11
SAP NetWeaver JAVA AS 7.10

Remediation

Vendor has not released updates or patches as of yet for this vulnerability.